The attached PDF outlines the permissions required by PowerChute Network Shutdown to carry out the tasks below:
Deploying PowerChute Virtual Appliance
Creating the vCenter Plug-in
Creating and triggering vCenter Alarms
Virtual Machine Migration
Virtual Machine Shutdown/Startup
vApp Shutdown/Start
Putting Hosts in to maintenance mode
Shutting down Hosts
This allows you to create a service account role for PowerChute in vSphere instead of assigning the Administrator role which has full privileges.

NOTE:
The 3 system permissions listed on page 6 of the PDF are not configurable via vSphere Client GUI when connected to vCenter Server via Permissions tab . They are assigned automatically to any new user role that is created.